
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/6A771720172811F19FAF5C920C3D8C67.roa
File: 6A771720172811F19FAF5C920C3D8C67.roa (raw, json)
Hash identifier: Hbk81FGPDQOMWNz9XbCk9hkwOTVay2PG7naNxaR0QYc=
Subject key identifier: F9:8D:CC:88:D3:19:2B:C6:3C:E5:1C:C9:9F:B3:10:28:A7:F7:9A:FB
Certificate issuer: /CN=A91CC0C9/serialNumber=47B577B9C8ABE2C3600C5B4E793FF4D47B650620
Certificate serial: BD
Authority key identifier: 47:B5:77:B9:C8:AB:E2:C3:60:0C:5B:4E:79:3F:F4:D4:7B:65:06:20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/6A771720172811F19FAF5C920C3D8C67.roa
Signing time: Tue 03 Mar 2026 17:42:58 +0000
ROA not before: Tue 03 Mar 2026 17:42:58 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 136209
IP address blocks: 103.43.70.0/24 maxlen: 24
103.43.71.0/24 maxlen: 24
103.82.141.0/24 maxlen: 24
103.82.142.0/24 maxlen: 24
103.82.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.crl
rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Mar 2026 06:38:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 189 (0xbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CC0C9, serialNumber=47B577B9C8ABE2C3600C5B4E793FF4D47B650620
Validity
Not Before: Mar 3 17:42:58 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a71da2-27f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:36:5a:e0:bc:db:f4:43:87:f2:20:de:0d:dc:
ed:ea:5c:44:d5:82:fe:58:58:88:fe:8d:f2:83:17:
14:8e:82:49:d7:e4:b9:dd:e3:f4:49:cc:9f:ff:b0:
95:9f:ce:59:56:9d:9e:b3:39:77:f6:d5:24:d1:90:
a6:81:28:45:36:d3:3a:16:ad:04:dd:11:a9:0c:18:
18:15:e0:aa:fd:76:e6:09:46:dd:74:e1:b5:75:1a:
b7:42:96:b0:f6:c1:2f:58:ba:41:92:59:f1:be:d5:
13:0c:56:50:07:7b:7d:c9:64:31:f5:cd:7d:20:33:
92:b8:0d:5d:a4:60:dd:92:9b:41:68:39:1e:ee:c3:
c8:35:d3:ea:65:34:b9:2e:12:18:79:b6:30:f1:49:
6f:7b:dc:76:e7:f4:3c:88:70:bc:68:29:89:a5:85:
c0:a3:c1:fa:fa:a3:10:6a:1b:a9:03:d9:5c:c1:93:
92:c5:b5:56:e5:25:ed:f9:08:e9:80:b6:58:d4:f2:
66:2d:b2:72:ac:af:86:a0:97:1c:d0:a2:28:29:05:
f6:a2:a9:0b:60:35:68:94:b5:fe:7a:6e:a1:e6:4c:
32:1e:44:ce:19:77:b5:93:04:9f:23:ec:5c:52:77:
41:d9:23:2b:96:9a:ce:41:6c:54:db:de:90:3d:f2:
15:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:8D:CC:88:D3:19:2B:C6:3C:E5:1C:C9:9F:B3:10:28:A7:F7:9A:FB
X509v3 Authority Key Identifier:
keyid:47:B5:77:B9:C8:AB:E2:C3:60:0C:5B:4E:79:3F:F4:D4:7B:65:06:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/6A771720172811F19FAF5C920C3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
103.43.70.0/23
103.82.141.0-103.82.143.255
Signature Algorithm: sha256WithRSAEncryption
3a:74:a7:5d:d8:8b:49:1e:bc:4b:91:51:47:9d:19:c4:e6:4c:
49:6c:03:e1:87:43:be:c9:b9:a5:d2:c0:7f:7a:c8:47:8f:bc:
93:b6:91:6c:6e:1e:1b:54:7f:49:cc:a3:23:bb:ac:db:4f:89:
15:75:64:9c:93:10:65:f6:3f:ac:06:7c:a4:78:77:97:ad:50:
fb:3f:72:3d:a0:50:fc:27:6a:b0:80:f5:f8:52:de:40:1e:de:
74:cf:ec:0b:2d:29:da:7c:2c:c3:59:22:24:da:ad:01:62:4a:
13:9c:9c:f6:17:f0:22:08:ae:ee:79:a4:59:4f:1a:7e:e8:32:
d5:78:dd:a0:75:09:33:42:cb:bd:bb:a4:ed:dc:59:6a:c9:ae:
81:55:6f:95:3a:34:38:54:b2:32:88:0e:10:67:a2:ef:a7:2d:
d4:ff:04:44:92:01:20:f0:a4:9c:c8:38:ca:ea:1e:f8:b7:45:
c0:a0:81:53:2e:82:1e:17:55:fa:13:fa:bd:e3:bd:12:d9:04:
6d:c7:17:43:0d:20:8b:16:a8:b2:29:82:5b:91:59:20:27:c7:
f1:70:8f:1d:5c:fa:d7:e1:dc:68:7f:c5:44:86:e6:b0:18:b6:
1e:93:80:00:fb:28:c4:e1:24:d6:52:66:5b:a9:08:e9:40:9a:
b7:15:b6:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 09:50:01 2026 by rpki-client